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Abstract Bent functions, which are maximally nonlinear Boolean functions 
with even numbers of variables and whose Hamming distance to the set of 
all affine functions equals 2"~^ ± 2?^^, were introduced by Rothaus in 1976 
when he considered problems in combinatorics. Bent functions have been ex- 
tensively studied due to their applications in cryptography, such as S-box, 
block cipher and stream cipher. Further, they have been applied to coding 
theory, spread spectrum and combinatorial design. Hyper-bent functions, as 
a special class of bent functions, were introduced by Youssef and Gong in 
2001, which have stronger properties and rarer elements. Many research fo- 
cus on the construction of bent and hyper-bent functions. In this paper, we 
consider functions defined over F2" by fa,b ■— Tr"(ax^^™~^^) -I- Tr^(6a;^"^), 
where n ~ 2m, m = 2 (mod 4), a G and b G Fie. When a S and 
{b + 1)(6* + 6+1) = 0, with the help of Kloosterman sums and the factor- 
ization of + X + a^^, we present a characterization of hyper-bentness of 
/a,b. Further, we use generalized Ramanujan-Nagell equations to characterize 
hyper-bent functions of fa,b in the case a € F^m. . 
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1 Introduction 

Bent functions are maximally nonlinear Boolean functions with even numbers 
of variables whose Hamming distance to the set of all afhne functions equals 
2"'~^±2'2~^. These functions introduced by Rothaus [35] as interesting combi- 
natorial objects have been extensively studied for their applications not only 
in cryptography, but also in coding theory [51I5T| and combinatorial design. 
Some basic knowledge and recent results on bent functions can be found in 
P1 [T51I5T| . A bent function can be considered as a Boolean function defined 
over F2, x ¥2^^ {n = 2m) or ¥2'^- Thanks to the different structures of 
the vector space and the Galois field ¥2^ , bent functions can be well stud- 
ied. Although some algebraic properties of bent functions are well known, the 
general structure of bent functions on is not clear yet. As a result, much 
research on bent functions on ¥2^ can be found in ^j^M ITTllT^I 1411 15112411^ 
[29ll30ll3ni32ll33ll38] . Youssef and Gong [37^ introduced a class of bent functions 
called hyper-bent functions, which achieve the maximal minimum distance to 
all the coordinate functions of all bijective monomials (i.e., functions of the 
form Tr"(ax*) -|- e, gcd(i,2" — 1) = 1). However, the definition of hyper-bent 
functions was given by Gong and Golomb |16j by a property of the extend 
Hadamard transform of Boolean functions. Hyper-bent functions as special 
bent functions with strong properties are hard to characterize and many re- 
lated problems are open. Much research give the precise characterization of 
hyper-bent functions in certain forms. 

The complete classification of bent and hyper-bent functions is not yet 
achieved. The monomial bent functions in the form Tr"(ax*) are considered in 
[2l[24]. Leander 24 described the necessary conditions for s such that Tr"(ax*) 
is a bent function. In particular, when s — r(2'" — 1) and (r, 2™ -I- 1) = 1, 
the monomial functions Tr"(ax*) (i.e., the Dillon functions) were extensively 
studied in [Bl ITTll^ . A class of quadratic functions over ¥2^ in polynomial 

form ^ aiTr"(a:"'^"'"^ ) -I- aj^Ti^ (a;2+i) (oj e F2) was described and studied 

in [T0l[T8lfT9l[20l[26l[38] . Dobbertin et al. [14] constructed a class of binomial 
bent functions of the form Tr"(aia;'*i + a2x''^), (ai, a2) G (Fj^)^ with Niho 
power functions. Garlet and Mesanager [7] studied the duals of the Niho bent 
functions in [T3] . In [^1501155] , Mesnager considered the binomial functions of 
the form Tr^(ax'^(2'"-i)) + Tr?(&cc^), where a G F^„ and b G F|. Then he 
gave the link between the bentness property of such functions and Kloosterman 
sums. Leander and Kholosha [3S] generalized one of the constructions proven 
by Dobbertin et al. jl4j and presented a new primary construction of bent 
functions consisting of a linear combination of 2^ Niho exponents. Carlet et 
al. [5] computed the dual of the Niho bent function with 2^ exponents found 
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by Leander and Kholosha [2S] and showed that this new bent function is 
not of the Niho type. Charpin and Gong [S] presented a characterization of 
bentness of Boolean functions over of the form ^ Tr"(ar-a;''*^^ ~^)), where 

i? is a subset of the set of representatives of the cyclotomic cosets modulo 
2™ + 1 of maximal size n. These functions include the well-known monomial 
functions with the Dillon exponent as a special case. Then they described the 
bentness of these functions with the Dickson polynomials. Mesnager et al. [31] 
131] generalized the results of Charpin and Gong [5] and considered the bentness 

of Boolean functions over of the form ^ Tr"(arx'''-^ ~^-') + Tr^(6a;~3~), 

where n = 2m, a,- G F2"« and b e F4. Further, they presented the link between 
the bentness of such functions and some exponential sums (involving Dickson 
polynomials) . 

In this paper, we consider a class of Boolean functions Hn- A Boolean 
function fa^b in Jin is defined over ¥2^ by the form: faM := Tr5'(aa;(2'"-i)) + 
Tr^(6a;^T^), where n = 2m, m = 2 (mod 4), a £ ¥2^^ and b £ Fig. When 
6 = 0, Charpin and Gong [5] described the bentness and hyper-bentness of 
these functions with some character sums involving Dickson polynomial. Gen- 
erally, it is elusive to give a characterization of bentness and hyper-bentness of 
Boolean functions in Hn ■ This paper discusses the hyper-bentness of Boolean 
function in Tin for two cases. In the first case 6 = 1 or 6'* -I- 6 -I- 1 = 0, we 
present the hyper-bentness of fa,b by the factorization of a;^ + a; + a^^ and 
Kloosterman sums. For the second case a G F^^ , we give all the hyper-bent 
functions with the help of generalized Ramanujan-Nagell equations. 

The rest of paper is organized as follows. In Section 2, we give some no- 
tations and recall some basic knowledge for the paper. In Section 3, we study 
the hyper-bentness of Boolean functions in T-ln for two cases (1) b = 1 or 
6^ + 6 + 1 = 0; (2) a £ ¥m.. Finally, Section 4 makes a conclusion. 

2 Preliminaries 

2.1 Boolean functions 

Let n be a positive integer. Fj is a n-dimensional vector space defined over 
finite field F2. Take two vectors x — (xi, • • • ,Xn) and y — (j/i, • • • , a;„) in Fj . 
Their dot product is defined by 

n 

1=1 

F2" is a finite field with 2" elements and Fj,, is the multiplicative group of 
F2" . Let F2fc be a subfield of F2n . The trace function from F2" to F2fc , denoted 
by Tr^!, is a map defined as 



Trl{x) x + x'^'' + H h a;^' 
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When k ~ 1, Tr" is called the absolute trace. The trace function Tr^ satisfies 
the following properties. 

Trliax + by) = aTr^(a;) + 6Tr^(t/), a,6 e F2fc,a;,y € Fan. 
Tr^(a;2'=)=Tr^(x), x € F^n. 

When F2fc C ¥2^ C Fan, the trace function Tr^ satisfies the following transi- 
tivity property. 

A Boolean function over Fg or F2n is an F2-valued function. The absolute trace 
function is a useful tool in constructing Boolean functions over F2n . Prom the 
absolute trace function, a dot product over is defined by 

{x,y):=TT^{xy), x, ye Fan. 

A Boolean function over F2n is often represented by the algebraic normal form 
(ANF): 

f{xi,--- ,Xn) = 51 «/(n^')' «/SF2. 

/c{i, ■■■,«} iei 

When 7 = 0, let fl =1- The terms fl Xi are called monomials. The algebraic 

degree of a Boolean function / is the globe degree of its ANF, that is, deg(/) := 
max{#(/)|a/ 7^ 0}, where #(/) is the order of / and #(0) = 0. 
Another representation of a Boolean function is of the form 

2"-! 

In order to make / a Boolean function, we should require ao,a2n-i € F2 
and a2j = a?j, where 2j is taken modulo 2" — 1. This makes that / can be 
represented by a trace expansion of the form 

f{x) = T^f\ajX^) + e(l + a;'""') 

ie-r„ 

called its polynomial form, where 

— Fn is the set of integers obtained by choosing one element in each cyclo- 
tomic class of 2 module 2" — 1 (j is often chosen as the smallest element 

in its cyclotomic class, called the coset leader of the class); 

— o{j) is the size of the cyclotomic coset of 2 modulo 2" — 1 containing j; 

- aj e F20O) ; 

- e = wt{f) (mod 2), where wt(/) := #{x e F2n|/(a;) = 1}. 
Let wt2(i) be the number of I's in its binary expansion. Then 



deg(/) 



n, 6 = 1 

max{wt2(j)|aj ^0}, e = 0. 
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2.2 Bent and hyper-bent functions 

The "sign" function of a Boolean function / is defined by 

Xif) (-1)^. 

When / is a Boolean function over , the Walsh Hadamard transform of / 
is the discrete Fourier transform of xif): whose value at w e F2 is defined by 

When / is a Boolean function over F2" , the Walsh Hadamard transform of / 
is defined by 

where w G F2n . Then we can define the bent functions. 

Definition 1 A Boolean function / : ¥2^ — > F2 is called a bent function, if 

x/H = ±2t (Vw e F2"). 

If / is a bent function, n must be even. Further, deg(/) <§[!]. Hyper- 
bent functions are an important subclass of bent functions. The definition of 
hyper-bent functions is given below. 

Definition 2 A bent function / : F2n — > F2 is called a hyper-bent function, 
if, for any i satisfying (i, 2" — 1) = 1, /(x*) is also a bent function. 

[5] and proved that if / is a hyper-bent function, then deg(/) = ^. For a 
bent function /, wt(/) is even. Then e = 0, that is, 

jer„ 

If a Boolean function / is defined on F^.^ x¥^:^ , then we have a class of bent 
functions dllllj. 

Definition 3 The Maiorana-McFarland class A4 is the set of all the Boolean 
fimctions / defined on F^a x F^a of the form f{x, y) = {x, n{y)) +g{y), where 
x,y € F^.^., TT is a permutation of ¥^:^ and g{x) is a Boolean function over 

F " 

For Boolean functions over F^a x F^a , we have a class of hyper-bent functions 

VSap 0. 

Definition 4 Let n = 2m, the VSap class is the set of all the Boolean func- 
tions of the form f{x, y) — g{^), where x,y ^ F2™ and g is a balanced Boolean 

functions (i.e., wt(/) = 2™-i) and 5(0) = 0. When y 0, let | = xy^"'^ = 0. 

Each Boolean function / in VSap satisfies f{f3z) = f{z) and /(O) = 0, where 
/? € FJ^ and z € F™ x F^. Youssef and Gong [32] studied these functions over 
F2n and gave the following property. 



6 



Chunming Tang et al. 



Proposition 1 Let n = 2m, a be a primitive element in ¥2^1 and f he a 
Boolean function over ¥2^ such that fioP' '^^x) = /(a;)(Vx € ¥2^) and /(O) = 
0, then f is a hyper-bent function if and only if the weight of (/(I), /(a), 
^s 2™"!. 

Further, [5] proved the following result. 

Proposition 2 Let f be a Boolean function defined in Proposition^^ If f{^) = 
0, then f is in VSap- If f{^) = I7 then there exists a Boolean function g in 
VSap and 5 £ ¥2^ satisfying f(x) — g{Sx). 

Let VSfp be the set of hyper-bent functions in the form oi g{Sx), where g{x) € 
VSap, S £ ¥2,1 and g{S) — 1. Charpin and Gong expressed Proposition [5] in a 
different version below. 

Proposition 3 Let n = 2m, a be a primitive element of ¥2^ and f be a 
Boolean function over¥2'i satisfying f{a^ x) — f{x) {\fx G ¥2^) and f{0) — 
0. Let ^ be a primitive 2™ + 1-th root in ¥2n . Then f is a hyper-bent function 
if and only if the cardinality of the set {i\f{C) = 1, < i < 2'"} is 2™^^. 

In fact, Dillon [IT] introduced a bigger class of bent functions the Partial 
Spreads class 'PS~ than VSap and VSfp. 

Theorem 1 Let Ei{i — 1, 2, • • • ,iV) be N subspaces in F2" of dimension m 
such that Ei D Ej = {0} for all i,j G {1, • • • , N} with i 7^ j. Let f be a 

N 

Boolean function over F2" . // the support of f is given by supp{f) = [J Ei : 

i=l 

where E* = Ei\{0}, then f is a bent function if and only if N — 2"^^^. 
The set of all the functions in Theorem [1] is defined by VS^ . 



2.3 Dickson polynomials 

Now we recall the knowledge of Dickson polynomials over F2 [31]. For r > 0, 
Dickson polynomials are given by 

LiJ ... 

Further, Dickson polynomials can be also defined by the following recurrence 
relation. 

Dt+2ix) = + A (a;) 

with initial values 

Do{x) = 0,Di{x) = x. 
Some properties of Dickson polynomials are given below. 

- deg{Dr{x)) = r. 

- Drp{x) = DriDpix)). 
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- Drix + X-^) = X'' + X-''. 

The first few Diekson polynomials with odd r are 

£'1(2:) = X, 
D3{x) =x + x^, 

Dz{x) = .T+x^ +x^ 

£'7(2:) = x + x^ + x'^, 
£'9(2;) = a; + + + x^, 
£'11(2;) ^ X + x^ + x^ + x^ + x^^ . 

The following proposition gives some properties on Dickson polynomials [121 



Proposition 4 Let m and k be two positive integers. Let XQ,yo € and 
yo = Dk{xo), then 

{di If x"^ + a;o2: + 1 is irreducible over and yo 7^ 
^2 If x^ + 2:02; + 1 is reducible over ¥2"^ and ?/o 7^ 
^ //yo = o 

where di = {k, 2™ - 1) and da = {k, 2" + 1). 

The reducibility of the polynomial x"^ + xqx + 1 can be determined by the 
following proposition. 

Proposition 5 Let m be a positive integer and xq G F2™ . Then x^ + 2:02; + 1 
is reducible over ¥2^ if and only i/Tr™(jjj) = 0. 



2.4 Kloosterman sums and Weil sums 
The Kloosterman sums on F2" are: 



K,nia):= J2 x(Trr(aa; + i)), aeFa^. 

Some properties of Kloosterman sums are given by the following proDOsition |17l 

Proposition 6 Let a e F2™. Then K^{a) G [1 - 2(™+2)/2, 1 + 2("+2)/2] and 
4 I X,„(a). 

Weil sums of degree 5 on Fa™ are: 

Q™(a):= x(Trl"(a(a^'+a:^+a;))), aeFa^. 
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To determine the value of Qm{a), we introduce an affine Artin-Schreier model 
of the form [2Sll3i: 

C ■.y'^ + a{x^ + + x),a e Fj™. 

This curve is a smooth supersingular curve of genus 2 over ¥2^^ and it has only 
one point at infinity. Let J(C) be the Jacobian of C over F2™. Let fj(c){x) 
be the Weil polynomial for J(C) of the form: 

fj^c){x) = + rx^ + sx^ + 2"Vx + 2", 

where (r, s) is determined by the irreducible factors of the polynomial P{x) — 
x^ + X + a~^. We write that P{x) = {niY^{n2Y^ ■ ■ ■ {fitY' to indicate that 
ri of the irreducible factors of P{x) have degree rii. Some results on the Weil 
polynomial of C are given in the following proposition ^ . 

Proposition 7 Let P{x), r and s be defined above, then 
(1) If m is even, (r, s) is determined by Table 1. 

Table 1 P{x) and (r, s) for even m 



Pix) 


{r,s) 


(5) 




(1)^(3) 


(±2-2™/2,3-2'") 


(1)(2)2 


(0,2 • 2™) 


(1)5 


(±4.2™/2,6-2™) 



(2) If m is odd, (r, s) is determined by Table 2. 

Table 2 P{x) and (r, s) for odd m 



P(x) 


(r, s) 


(1)(4) 


(0,0) 


(2) (3) 


(0,2™) 


(1)3(2) 


(0, -2 ■ 2™ ) 



The number of rational points on C (including the infinite point) can be de- 
termined by the Weil polynomial fj(c){x)- We write N{¥2^) = #(C(F2™)). 
Then [25] 

iV(F2™) = 2" + 1 + r, A^(F22„0 = 2^™ + 1 + 2s - r^. (1) 
Further, we have the following result. 
Proposition 8 Let Qmio) and r be defined above, then 

Qin{a) = r. 
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Proof To prove Qm{a) = r, we just prove that 

g„,(a) = N{F2^) - (2" + 1) = #(C(F2.0) - (2" + 1). 

C(F2™) has only an infinite point. A point {x^y) is in C(F2m) if and only if 
X e F2™ and Tr7*(a(a;5 + + a;)) = 0. Then 

#(C(F2.0) =l + 2-#{a;eF2".|Tr7'(a(x5+x3 + x)) -0} 

=2 • e F2™ |Tr5"(a(a;^ + + x)) = 0} - 2™ + (2"* + 1) 
= E x(Trr(a(x'+x3+x))) + (2'" + l). 

From the definition of Qm(a), 

#(C(F2™)) -2" + l + Q„(a). 

Hence, = 

From Proposition [7] and Proposition |5J we can easily obtain two following 
corollaries. 

Corollary 1 Let m be even and a G F2™, then Qm{a) G {0,±2"/2,±2- 

Corollary 2 Let m he even and a e F2m , then 

(1) Qm{a) ^0 if and only if P{x) = a;^ + x + = (1)(2)^ 

(2) — ±2™/^ i/ and only if P{x) = x^ -\- x ~\- a^^ is irreducible over 
F2™. 

Remark 1 When P(a;) = i^+x+a"-'^ is irreducible over F2m , the sign of Qm (a) 
is related to the parity of the quadratic form q(x) = Tr™(a;(aa;'* + ax^ + a^x)). 
(\{x) is the quadratic form associated to the simplectic form: 

< x,y >q'-~ Tr™(x(aj/^ + ay^ + a^y) + y{ax'^ + ax^ + a^x)), 

which is non-degenerate. Then there exists a normal simplectic basis ei, e„ii+i, 
e„ii, e2mi (2mi = to). If i ^ j( mod toi), < ei,ej >q= 0. For any 
i {l<i < TOi), < Ci, e^m+i >q= 1- If #{i|q(ei) = q(e„i+i) = 1, 1 < i < TOi} 
is even, then the quadratic form q[x) is even and Qm{a) — 2™^. If #{»|q(ei) = 
q(emi+j) = mi} is odd, then the quadratic form q(a;) is odd and 

Qm{o) — — 2™\ In fact, the parity of q(a;) can be determined by the point 
multiplication of a random element in J(C)(F2™). Consequently, the sign of 
Qm{a) is determined [3]. 
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3 A class of hyper-bent functions in binomial forms 

3.1 Boolean functions in Hn 

Through the paper, we assume that n = 2m and m = 2 (mod 4). Let Hn be 
the set of Boolean functions on of the form: 

UAx) TrlXax^"-!) + Trt(&x^), (2) 

where a G and b E Fig. 

Note that the cyclotomic coset of 2 module 2" — 1 containing ^ ~^ is 
{^^,2 • ^^,2^ • ^^,2^ • ^^}. Then its size is 4, that is, o(^^) = 4. 
Hence, the Boolean function fa,b is not in the class considered by Charpin and 
Gong [6]. Further, it does not lie in the class of Boolean functions studied by 
Mesnager [2T1E2- 

Since m = 2 (mod 4) and 2™ + 1 = (mod 5), any Boolean function fa,b 
in Hn satisfies 

/a,&(a2'"+ia;)=/,,b(a;),Va;eF2n, 

where a is a primitive element in F2". Note that /a, 6(0) — 0. Then the hyper- 
bentness fa^t can be characterized by the following proposition. 

Proposition 9 Let fa^b G ^n- Set the following sum: 

A{a,b):=J2x{faAu)) (3) 

ueu 

where U is the group of all 2™ + 1-th roots of unity in ¥2^, that is, U = {x € 
F2"|2:^ = 1}. Then fa,b is a hyper-bent function if and only if A{a,b) = 1. 
Further, a hyper-bent function fa,b lies in VSap if and only if TTi[b) — 0. 

Proof From Proposition [31 fa^b is a hyper-bent hmction if and only if its re- 
striction to U has Hamming weight 2™~^. Note that 

Aia,b)^J2^(fM) 

xeu 

= #{U e UlfaA^i) - 0} - #{u|/a,6(u) = 1} 
= #[/ - 2#{w|/,,b(u) = 1} 

= 2" + 1 - 2#{u\fa.b{u) = !}■ 

Then the restriction of fa,b to U has Hamming weight 2"^~^ if and only if 
A{fa,b) = 1- Hence, fa,b is a hyper-bent if and only if A{fa.b) = 1. As for the 
second part of this proposition, we get that 

/,,6(1) ^TrUa) + Trt{b) 

-Trr(a + a2'") + Trf(6) 

=Trt(6). 

Then fa,b{^) = if and only if Tri(6) — 0. Hence, from Proposition [31 fa,b lies 
in VSap if and only if Tr^(6) = 0. 
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3.2 Character sums on Boolean functions in Hn 

Dillon [TT] presented the characterization of the hyper-bentness of fa,o- In this 
paper, we consider the hyper-bentness of fa,b(b 7^ 0) in Hn- We first give some 

notations and present some properties of character sums. 

2^—1 

Let a be a primitive element in T-Ln- Then /3 — a 5 is a primitive 5-th 
root of unity in U , where U is the cyclic group generated by ^ = Let 
V be the cyclic group generated by a^^"^ Then we have 

U = Uto^^, = F;„, X U. 

We introduce the character sums: 

5. = ^x(Tr?(«(r^^)''"-')). 

Then, we have 

Sa + Si+S2 + S^ + Si = Y, x(Trr(aw2'"-i)) = A{a, 0). (4) 

ueu 

Obviously, for any integer i. Si — Si (mod 5)- Further, we have the following 
lemma on Si. 

Lemma 1 Si = S^, S2 — S3. 

Proof Note that Tr^(a;2") = Tr;'(x), then 

S, = ^x(Tr?(a(ez;)(2'"-i))) = ^ x(Trna''"(e''"t'''")(''"-^))). 
vev vev 

From a G F2m, a^" = a. Since m = 2 (mod 4) and 2™ = —1 (mod 5), hence 
i2" = ~i (mod 5) and f 2'"^2™ ^ ^_ij.^,(2'"+i)^2"-)^ ^j^gj.g ^*(2'"+i) ^ rpj^g 

map V I — S- ^*'2 +^'ti2 is a permutation of V. Consequently, 
5, = ^x(Trl'(a(r^^;)(2"-l)))=^_,. 

We just take i — 1,2. Then this lemma follows. 

From Q and Lemma (TJ we can get the following corollary. 

Corollary 3 5o + 2(5"! + S2) = A{a, 0). 

Further, A(a, b) is a linear combination of 5'o, Si and S2. 

Proposition 10 ^(a,6) = x(Tr^(6))5o + (x(Trt(6/32)) + x(Trt(6;33)))^i + 
(x(Trt(6/3))+x(Trt(6/34)))52. 
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Proof From ([3]), we have 
ueu 

= Ex(t4(6u^))x(/.,o(«)) 



4 



E E xiTrt{b{ev)^))xifaAev)) (From 
i=o vev 

4 

E E x(Trt(6(a^(^"-i))^))x(/a,o(f «)) = a'"-^) 

4 

E E x(Trt(6/3^(2"-i)))x(/a.o(r^')) (/? = a"^)- 



1=0 dGV 

Since 2™ + 1 = (mod 5), 2™ -1 = 3 (mod 5) and 

4 4 

A{a,b) = E E x(Trt(6/33^))x(/a.o(r«)) = E x(Trt(6/3^')) E xUaACv)). 

i=0 v£V i=0 vev 

From the definition of Si, 

4 

A{a,b)^Y.xi^^4ibP'l)S^. 

i=0 

From Lemma [U this proposition follows. 

Further, if a G F2mi , where toi = m/2, we have the following proposition. 
Proposition 11 //a e ¥2^1, where mi = m/2, then 
Si= S2,So + 4.Si= A{a,0). 
Proof From a G F2-1 , Tr'i'(aa;(2'"-i)) = Tr^ (ax^"' (z"-!)). Then 

= Ex(Trr(«(f-)^''""^')) = Y.x{^^i(a{e^''v'^')^''"-'^))- 

We take z = 1. Then 

^i = Ex(Tr^(«(^'"-'")^''"~''))- 

Since 2™ + 1 ee (mod 5), (2™i)2 ee -1 (mod 5) and 2™i ee ±2 (mod 5). 
When 2"! = 2 (mod 5), 

5i = Ex(Trr(a(^2^^"^-V'"^)(^"-i))). 

vev 
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The map v i — > ^ "^v"^ ^ is a permutation of V. Consequently, 

^i = 5]x(Trl'(a(CM<'""'^)) = ^2. 

vev 

When 2™i = —2 (mod 5), we can similarly have = 5*3. 
Above all. Si = 82- From CorollaryU So + 45i = A(a, 0). 

For yl(a, &), the following proposition gives some properties. 

Proposition 12 /l(a, h) satisfies 

(1) /l(a,64) = A{a,h). 

(2) 7/6 is a primitive element 0/F216 anii Tr^(6) ~ 0, yl(a, fe^) = A{a,b) = 

So- 

Proof (1) For any b e Fig, Trf (fe^) ^ Tr^(6). Then 

Trt(&(/3' + = Trt(6^(/3** + f3^^)) = Trt(6^(/3' + /J^)) 
Trt(6(/3 + /34)) = Trt(6^(/3^ + P^")) = Trt(64(/3 + 

From Proposition [TUl yl(a, 6"') = A{a,b). 

(2) If 6 is a primitive element in Fig such that Tr^(&) = 0, then b^+b+1 = 0. 
Further, 

Trt(6(/32 + /33)) =TTl{b\l3^ + /J^) + 6(/32 + 13^)) 

^TTl{{b + b^)i^'+P^)) 
=Tr2(/32+/33)_ 

The minimal polynomial of /3 in F2 is + + /S^ + ^ + l = 0. Then 

Tr2(/32 + ^2 ^ /33 + /34 _^ /36 ^ 1. 

Consequently, Tr^(&(^2 _^ ^3)) ^ Similarly, Trt(&(/3 + Z?"*)) 1. Therefore, 

x{T4ibf3')) + X{^4{bf3^)) = 0, x{^4m) + x{^4{bf3')) = 0. 

From Proposition [TUl A{a,b) = Sq. 

Since 6 is a primitive element such that Tr^(fe) = 0, b^ is also a primitive 
element such that Ti'^^b'^) = 0. Consequently, A{a, 6^) = A{a, b) — Sq. 

Explicit results on A{a^ b) are given in the following proposition. 

Proposition 13 Let b e F^g, then 

(1) Ifb=l, Aia,b) = 5o - 2(5i +^2) = 25o - ^(a,0). 

(2) Ifb e {/3 + /32,/3 + /33,^2_^/34,/33 + /34}^ that is, b is a primitive element 
satisfies Tr^(6) = 0, then A{a, b) = Sq. 

(3) Ifb = 13 or p^, then A{a,b) = -So - 2Si. 

(4) Ifb = P^ or /3^, then A{a,b) = -So - 2S2. 

(5) Ifb =1 + 13 or 1 + /3'*, then A{a,b) = -So + 2Si. 

(6) Ifb=l + P^ or 1 + 13^, A{a,b) = -So + 2S2. 

(7) Ifb = 13 + (3^, then A{a,b) = So + 2Si - 2S2. 

(8) Ifb = p'^+I3^, then A{a,b) = S0-2S1+2S2. 
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Proof From Proposition 1101 this proposition follows. 
Further, if a G ¥2"^! , we have the following proposition. 

Proposition 14 If a E F2'"i , then 

(1) Ifb = l, then A{a,b) = 2Sa-A{a,0). 

(2) //6e {/3,/32,/33,/34}, thenA{a,b) = -5*0 - 2 S*! = -^o+M^^ 

(3) Ifbe {1 + /3, 1 + /3^ 1 + /3^ 1 + (3^}, then A{a, b) = ~Sq + 2Si = 

3So-A{a,0) 

{A)Ifb e {/3+;32^ /32+/?4^ /33+/34, /32+/33}^ then A{a, b) ^ Sq. 

Proof From Proposition 1111 and Proposition [131 this proposition follows. 
Corollary 4 For a e F2™i , A{a, b'^) = A{a, b). 
Proof This corollary can be obtained by Proposition [HI 

We now introduce some results on character sums. 

Lemma 2 Let U be the group of 2™ + 1-th roots of unity in , then for any 
positive integer p, 

^ x(Tr(ax?'(2'"-i))) ^1 + 2 ^ x(Tr(ai?p(x))). 

ueU 2;eF*„, ,Tr™(x-i) = l 

Proof This lemma is a special case of Lemma 12 by Mesnager 

Proposition 15 Let Sq and A{a, 0) be defined above, then 

(1) Aia,0)^l-Km{a). 

(2) So = l[l-Km{a) + 2Qm{a)]. 

Proof (1) From Lemma [21 

Aia,0)=Y,x{TrUau''"-')) 

ueu 

=1 + 2 Yl x(TrrM) 

KeF;„,Tr'i"(3:-i) = l 

=1 + 2. x(Trr(ax))- J] ^(T^Tiax + ^))]. 
Note that x(Tr"(ax)) = 0, then 

.l(a,0) = l- ^ x(Trr(ax+i)) = l-/C™(a). 
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(2) Note that 5*0 = E x(Tr'/(aw2'"-i)) = i ^ xi^^^iiau^''^"' ^^ jj). Then 
from Lemma [21 

So^l[l + 2 J2 x(Trr(a^5(x)))] 

a;eF5„,Tr™(2;-i) = l 

=l[l + 2 5] x(Trr(ai?5(x)))-2 ^ x(Trr(ai?5(a;)))]. 

aSFam a:GF2™,Tf™(3;-i)=0 

Since = = - + + (tt^)', Tr™(^yVT) = Tr™(i). 

D^lx) x-^ -\-x'^-\-x X x^-\-x-\-l ^ x''-\-x-\-l ' J- ^ Db{x) J- ^ a; 

Then D^{x) induces the map 

{x e F2™|Trr(x-i) = 0} ^ {a; e |Tr™(:E-^) - 0} 
X I — > Dr^[x). 

From Proposition m this map is a permutation of {x E F2n« |Tr™(a;^^) = 0}. 
Hence, 

J2 xiTrTiaD.ix))) 

a:eF2m,Try(a;-i)=0 

5^ x(TrrM) 

xeFgrn ,Tr5"(x-i)=0 

x(TrrM)+ E x(Trr(ax + ^))] 
=iif„(a). 

Consequently, 6*0 = ^[1 + 2Q„i{a) - K„i(a)]. 

The relation between Km{cL), Qmio) and A{a, h) is given in the following propo- 
sition. 

Proposition 16 Let A{a,h) he defined above, where a S F2m, h e F^g, then 

(1) Ifb=l, then A[a,l) ^ - Km{a)) - AQ^{a)]. 

(2) If b is a primitive element such that Tr*(6) — 0, then A{a,b) — ^[1 — 
K^(a) + 2Qr,i{a)]. 

Proof From Proposition [T^ yl(a, 1) = 25*0 — A{a, 0). Further, Proposition [T51 

A{a, 1) =2 4[1 - i^r„(a) + 2Q™(a)] - (1 - X„(a)) 
5 

3 4 
= - -{I - K„,{a)) + -g™(a) 

= -^[3(l-i^,„(a))-4Q™(a)] 

(2) From Proposition[T3l and Proposition[T5j A{a,h) = So = — if„j(a) + 
2Qm(a)]- 
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3.3 The hyper-bentness of fa,b{a G F2™, (6 + 1)(&^ + b + 1) = 0) 

Proposition 17 Let n = 2m. m — 2mi, mi = 1 (mod 2) and mi > 3, the 

Boolean function fa.i in Tin of the form 

Tr^(aa;2"-i) + Tr^(x^) 

is a hyper-bent function if and only if Qm{a) — 2"'^ and K„i{a) ~ |(2 — 2"'^) 
holds. 

Proof From Proposition[9l fa,i is a hyper-bent function if and only if A{a, 1) = 
1. From Proposition[ni A{a,l) = -i[3(l-if„(a))-4Q„(a)]. Then yl(a, 1) = 
1 if and only if K„i{a) = |(2 — Qm{a)). Note that 

1 _ 2 . 2™i < K^{a) < 1 + 2 • 2"i. 

Further, we have 

_^ . 2™i + - < Qmia) < - ■ 2"! + -. 

2 4 ~ ' ~ 2 4 

From mi > 3, 

-2-2™i <Qrn{a) < 2-2™i. 

From CoroUaryHl Q„(a) € {0,±2™i,±2 • 2"!, ±4 • 2"!}. Hence, the value of 
Q„(a) is or ±2"!. 

If Qm{a) = 0, then Km{a) = |(2 — 0) = |. Since K„i{a) is an integer, 
g„(a) ^ 0. 

If Q„(a) ^ -2™i, then /s:„(a) = |(2 + 2"i) = |(1 + 2"'^-^). Since mi is 
odd, 3 /(I + 2"i-i). Hence, Q™(a) 7^ -2™i. 

As a result, /a,i is a hyper-bent function if and only if Qm{o) — 2™^ . Then 
Km{a) — |(2 — 2™i). Hence, this proposition follows. 

Proposition 18 Let n ~ 2m. m = 2mi, mi = 1 (mod 2) and mi > 3. Let b 
be a primitive element in F*g such that Tri(6) = 0. The Boolean function fafi 
in Hn of the form 

Tr5'(ax'"-i) + Trt(fox^) 

is a hyper-bent function if and only if one of the following assertions (1) and 
(2) holds. 

(1) 0™(a) =0, K„,{a)^-A. 

(2) g„(a) = 2"% if™ (a) = 2 • 2™i - 4. 

Proof fa,b is a hyper-bent function if and only if A{a, b) — \. From Proposition 
[121 when 5 is a primitive element such that Tri(6) — 0, /l(a, fe) = 5*0. From 
Proposition [151 A{a^b) — i[l — K„i{a) -\- 2Qm{a)]- Hence, A{a,b) = 1 if and 
only if Km{a) = 2Q™(a) - 4. 

From Corollary [H Q™(a) € {0,±2™i,±2 • 2™i,±4 • 2"'i}. Further, from 
Proposition El K™(a) € [1 - 2 • 2™i, 1 + 2 • 2™i]. Hence, Qm{a) = or 2™!. 
If Qrn{a) - 0, then K^{a) = -4. If Q™(a) = 2™S then if„(a) = 2 • 2"i - 4. 
Therefore, this proposition follows. 



A new class of hyper-bent Boolean functions in binomial forms 



17 



Theorem 2 Let n = 2m, m = 2mi, mi = 1 (mod 2) and mi > 3. T/ie 
Boolean function fa^i in T-Ln of the form 

Tr5'(ax2"-i) + Trt(x^) 

is a hyper-bent function if and only if the following assertions holds. 

(1) p{x) = + X + a^^ is irreducible over ■ 

(2) The quadratic form C[{x) = Tr™(x(aa;'* + ax^ + a^x)) over is even. 

(3) if™(a) = 1(2 -2™0- 

Proof From Proposition [TTl and Corollary [2j this theorem follows. 

Theorem 3 Let n = 2m, m — 2mi, mi = 1 (mod 2) and mi > 3. Let b be 
a primitive element in FJg such that Tr^(&) = 0. The Boolean function fafi in 
T-Ln of the form 

Tr5'(aa;''"-i) + Trf(&x^) 

is a hyper-bent function if and only if one of the assertions (1) and (2) holds. 

(1) p{x) = x^ + X + a"'^ over F2™ is (1)(2)2 and K,n{a) = -4. 

(2) p{x) — x^ + x + a^^ is irreducible over ¥2^^. The quadratic form c\{x) = 
Tr™(a;(aa;'^ + ax"^ + a'^x)) over Fa- is even. K„i{a) = 2 ■ 2"^ - 4. 

Proof From [TH] and Corollary [21 this theorem follows. 



3.4 The hyper-bentness of fa,b (a G ' ^ ^ '^is) 

To consider the hyper-bentness of fa,b (a G F^^jfe G ^iq), we require more 
properties of K„i{a) and Qm{a). 

Lemma 3 Let a G Fjmi , m = 2mi and p{x) — x^ -\- x -\- a^^ , then 

(1) 1 - X,„(a) - (1 - K,r^Ao)? - 2 • 2™i. 

(2) // mi = 1 (mod 2), then Q„,{a) E {0, 2 • 2™i,-4 • 2"^^}. Further, 
Qm{o) = i/ and only if p{x) = (1)(4). Qm{o) — 2 • 2™! i/ and only if 
p{x) = (2)(3). g™(a) = -4 • 2™i z/ arid on/y i/p(a;) = (1)3(2). 

Proof (1) We introduce an auxiliary curve 



C : y"^ + y = ax + - ,a £ ¥2^1 , 
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that is, xy^ +xy — ax^ + 1. Hence, C is an elliptic curve. There are two infinite 
points on C and the x coordinate of any point on C is not zero. Therefore, 

#(C(F2™i )) =2 + 2 ■ e F;„, |Tr™i {ax + -) = 0} 

X 

=2 • #{x e iTrfi (ax + -) = 0} 

a; 

= • #{2; e |Tr™i (ax + i) = 0} - 2"^ + 2™! 
= 5^ x(Trr(«:^+^)) + 2'"^ 

-(1 + 2'"0+^mi («)-!• 

Further, #(C(F22„,i ))==(! + 22"i) + i^2mi (a) - 1- From properties of elliptic 
curves, we have 

1 - K^{a) = 1 - if2„H(«) = (1 - K„,,f - 2 • 2™i. 

(2) Consider p{x) = x^ + x + a^^ over F2mi . From Proposition |5] and ((T)), 

(5„i(a) = 2s - r^, 

where (r, s) is determined by mi and Proposition [T] Therefore, Qm{o,) = 
if and only if p(x) = (1)(4). Q„(a) = 2 • 2™i if and only if p{x) = (2)(3). 
g,„(a) = -4 • 2"'i if and only if p{x) = (1)^(2). 

Corollary 5 Let a E F2">i , m = 2mi anrf mi = 1 (mod 2), t/ien Km{a) 7^ 
-4. 

Proof From Lemma [31 if Km{a) = —4, 

(1 - ^ 2 • 2™i + 5. (5) 

Since mi > 3 and mi ee 1 (mod 2), {2^^ f < (1 - /sT^, (a))^ < (2^^ + 1)2. 
Then ([5]) has no integer solution. Hence Km{a) 7^ —4. 

Theorem 4 Let n = 2m, m, = 2mi, mi = 1 (mod 2) and mi > 3. // 6 G 

Il'i6\{/3*|1 < i < 4}, then the Boolean function fa.t in "Hn of the form 

Tr5'(ax2"-i) +Trt(6x^),a G F2™i 
is not a hyper-bent function. 

Proof When 5 0, fa.o is a hyper-bent function if and only if A{a,0) = 1. 
From Proposition I15[ Aafi = 1 — Km{a). Hence, fafl is a hyper-bent function 
if and only if X„(a) = 0. From LemmaH (1 - K,n{a)f = 2-2^^+1. mi is 
odd, then 

(2^)2 < 2 • 2"! + 1 < (2^ + 1)2. 
2 • 2™! -I- 1 is not a sqare. Then fafl is not a hyper-bent function. 
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When b = 1, from Proposition[T31 A{a, 1) — 2SQ—A{a, 0). From Proposition 

Hi 

A{a, 1) = -^(1 - Kmia)) + ^Q™(a)] = -^[3(1 - if„(a)) - 4Q„(a)]. 

From Proposition ini fa.i is a hyper-bent function if and only if 3(1 — X,„(a)) — 
4(5m(fl) = — 5. From Lemma [31 

3(1 - K„,Aa))^ - 6 • 2'"i +4Q™(a) - 5. (6) 

Note that Q™(a) £ {0, 2 • 2™% -4 • 2™i}. If g,„(a) = 0, ® does not hold. If 
Qmia) = 2 •2"!, then 

3(1-X„,(a))2 ^ 14.2'"i -5. (7) 

From Proposition m 1 - Kmdo-) ^ [-2 • 2"i, 2 • 2"i]. Since toi > 3, © does 
not hold. If Qm{a) ^ -4 • 2'"i, then 

3(l-X™,(a))2--10-2"i -5, (8) 

Obviously, (|8]) does not hold. As a result, fa.i is not a hyper-bent function. 

When b e {fi + , 13 + P"^, f3^ + I3\ [3^ + p\ (3 + (3\ + 13^}, A{a,b) = So- 
From Proposition [T51 yl(a, 6) = i[l — K,n(a) + 2Qm(a)]. If /a t is a hyper- 
bent function, then A(a,b) — 1. Hence, 1 — Km{a) = 5 — 2Qm{a)- Note that 
Q™(a) e {0,2-2"S-4-2"'i}. Since 1 - i^„(a) € [-2 • 2'»S 2 • 2"i], Q„,(a) = 
and 1 — Km{a) = 5. Then Km{a) = —4. From Corollary[5l Km{a) ^ —4, which 
gives a contradiction. Hence, /qj, is not a hyper-bent function. 

When 6 e {1 + /3, 1 + /32, 1 + /33, 1 + ^4}, yl(a, 6) = _ 35o-/i(a,o) ^ p^.^^^ 
Proposition [151 ^(a, = ^[l — Km{a) — iQm{a)]. If fa,b is a hyper-bent 
function, 1 — Km{a) ~ iQrn{a) + 5. Further, we have Qmia) — and 1 — 
K,n{a) = 5, that is, Km{a) — —4, which contradicts Corollary [5l Hence, fa,b 
is not a hyper-bent function. 

Above all, this theorem follows. 

We now introduce some results on generalized Ramanujan-Nagell equations 
[Tl l^l^ . A generalized Ramanujan-Nagell equation is of the form 

where Di, D2 are two positive integers, p is a prime and 77 € {1, v^, 2}. 

Generally, a generalized Ramanujan-Nagell equation have no more that a 
solution. Some exceptions are listed in |lj. In particular, we have the following 
lemma. 

Lemma 4 The equation ISx^ + 1 = 2 • 2*"' has only a solution {x,k) = (1,3). 
The equation 3x^ + 5 = 4-2'^ has three solutions {{x, fc)|(l, 1), (3, 3), (13, 7)}. 
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Theorem 5 Let n ~ 2m. rn 2toi, mi — 1 (mod 2) and mi > 3. If n ^ 
12, 28, then the Boolean functions fa^b in 'Hn of the form 

Tr^ (ax^"-!) + Trt(6x^), a G Fs^i , b e Fie, 

is not a hyper-bent function. Further, if n — 12, all the hyper-bent functions 

with a G F23 in H12 are Tr]^(ax^ '^^) + Tri{bx 5 )^ where (a + l)(a^ + + 
1) = and 6 — /3*,i = 1,2,3,4. If n ~ 28, a/Z i/ie hyper-bent functions with 

ae¥27 inH28 are Trf{ax'^''-^) + Tri{bx^-^), where {a + l){a'^ + + a^ + 
a-* + + + 1) = and 6 = /3\ i = 1,2, 3, 4. 

Proof Ub = {i ^ 1,2,3,4), then yl(a,6) = - ^°+^(°'°) . From Proposition 

A{a,b) ^ -^[3{1 ^ K,n{a)) + Q„,{a)]. 

Then fa.t is a hyper-bent function if and only if A{a, b) — 1, that is, 

3(l-X„,(a)) + Q„(a) = -5. (9) 

From LemmaH Q™(a) G {0, 2 • 2"i,-4 • 2"i}. If Q„,(a) = 0, © does not 
hold. 

From Lemma [21 

3(1 - Km, (a))' - 6 • 2"! - Q„(a) - 5. (10) 

If Q„(a) = 2-2"S 

3(l-if„(a))2 + 5 = 4-2"i. (11) 

From Lemma S we have {Km^{a),mi) G {(4, 3), (-2, 3), (14, 7), (-12, 7)}. 
Since 4|if„,(a), (i^,„, (a), mi) = (4,3) or (-12,7). 

If Q„,{a) = -4 • 2"!, then 3(1 - K„iM)? = 5(2 • 2™! - 1). Hence, 5|1 - 
Kmiia). Then 

2-2"^ ^15( ^~^"'^^"V + 1. (12) 
5 

From LemmalU {Kmi (a), mi) — (6, 3) or (—4, 3). Since ^\Kmi (a), {K„ii (a), mi) = 
(-4,3). 

If {K,n, (a), mi) = (4, 3), then Q„(a) = 2 • 2™i . If {K„,, (a), mi) = (-4, 3), 
then Qm{a) = —4 • 2'"^^ . From Lemma[31 if mi = 3, then n — 12 and /^^^i (a G 
Fg,i = 1,2,3,4) is a hyper-bent function if and only if one of the assertions 
(1) and (2) holds. 

(1) p{x) = + a; + fl-i = (2)(3) and Kz{a) = 4. 

(2) p\x) = + a; + fl-i = (1)^(2) and K^{a) = -4. 

If {Km^{a),mi) = (-12,7), then Q„(a) = 2 • 2™!. From Lemma H if 
mi = 7, then n = 28 and fa, pi {a G F128, i = 1,2, 3, 4) is a hyper-bent function 
if and only if p(x) = + x + a^^ = (2)(3) and ^^7(0) = -12. 
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With the help of experiments on the computer, if mi = 3, then n = 12 and 
all the hyper-bent functions with a S Fg in are 

Tr\\ax''''-')+Tri{bx"-^), 

where {a + l){a^ + + I) =0 and & = = 1,2,3,4). 

If mi = 7, then n = 28 and all the hyper-bent functions with a £ ¥i28 in 
■^28 are 

IVf(aa;2"-i)+TVf(6a;^), 

where (a + l){a^ + + + + + + 1) = and 6 = (i = 1, 2, 3, 4). 
Above all, this theorem follows. 

4 Conclusion 

This paper considers the hyper-bentness of the Boolean functions fa,b of the 
form fa^b ■= Tr"(aa;^'"^-^) + Tr^(6.x^~^), where n = 2m, m = 2 (mod 4), 
a G F2™ and b G Fig. If 5 = 1 or 6 is a primitive element in Fig such that 
Tr*(6) = 0, the hyper-bentness of fa^b can be characterized by Kloosterman 
sums and the factorization of + x + a~^. If a € F*™ , with the help of 

2"3" 

generalized Ramanujan-Nagell equations, we prove that fa,b is not a hyper- 
bent function unless n = 12 or n = 28. Further, we give all the hyper-bent 
functions for n = 12 or n = 28. 



References 

1. Bugeaud Y., Shorcy T.N.; On the number of solutions of the generalized Ramanujan- 
Nagell equation, I.J. reinc angcw. Math. 539 (2001), 55-74. 

2. Cantcaut A., Charpin P., Kyureghyan G.: A new class of monomial bent functions. Finite 
Fields Applicat., vol. 14, no. 1, pp 221-241, 2008. 

3. Cardoiia G., Nart E.; Zcta function and cryptographic exponent of supcrsingular curves 
of genus 2. In Pairing-Based Cryptography — Pairing 2007, volume 4575 of Springer 
Lecture Notes in Computer Science, pages 132-151, 2007. 46 

4. Carlet C.: Boolean functions for cryptography and error correcting codes, in Chapter 
of the Monography Boolean Models and Method in Mathematics, Computer Science, and 
Engineering, Y. Crama and P. L. Hammer, Eds. Cambridge, U.K.: Cambridge Univ. Press, 
2010 pp. 257-397. 

5. Carlet C, Gaborit P.: Hypcrbcnt functions and cyclic codes, ,1 Combin. Theory, ser. A, 
vol. 113, no. 3, pp. 466-482, 2006. 

6. Carlet C, Helleseth T., Kholosha A., Mesnager S.: On the Dual of the Niho Bent Func- 
tions with 2^ Exponents, 2011, to be published. 

7. Carlet C, Mesnager S.: On Dillon's Class H of Bent Functions Niho Bent Functions and 
O-Polynomials Cryptology ePrint Archive Report no 567. 

8. Charpin P., Gong G.: Hyperbent functions, Kloosterman sums and Dickson polynomials, 
IEEE Trans. Inf. Theory, vol. 9, no. 54, pp 4230-4238, 2008. 

9. Charpin P., Kyureghyan G.; Cubic monomial bent functions: A subclass of M. , SI AM 
J. Discr. Math., vol. 22, no. 2, pp. 650-665 2008. 

10. Charpin P., Pasalic E., Tavcrnicr C, On bent and scmi-bcii quadratic Boolean functions, 
IEEE Trans. Inf. Theory, vol. 51, no 12, pp. 4286-4298, 2005. 

11. Dillon J.:, Elementary Hadamard Difference Sets, Ph.D., Univ. Mary- land, 1974. 



22 



Chunming Tang et al. 



12. Dillon J. F., Dobbcrtin H.: New cyclic difference sets with Singer parameters, Finite 
Fields Applicat., vol. 10, no. 3, pp. 342-389, 2004. 

13. Dobbcrtin H., Lcander G.: A survey of some recent results on bent functions, in T. 
HcUesctli ct al. (cds.) Sequences and Their Applications, LNCS 3486, pp. 1-29, Springer, 
Heidelberg, 2004. 

14. Dobbertin H., Leander G., Canteaut A., Carlet C., Felke P., Gaborit P.: Construction of 
bent functions via Niho power functions, J. Combin. Theory, ser. A, vol. 113, pp. 779-798, 
2006. 

15. Gold R.: Maximal recursive sequences wfith 3- valued recursive crosscorrelation functions, 
IEEE Trans. Inf. Theory, vol. 14, no. 1, pp. 154-156, 1968. 

16. Gong G., Golomb S. W.: Transform domain analysis of DES, IEEE Trans. Inf. Theory, 
vol. 45, no. 6, pp. 2065-2073, 1999. 

17. Hellcseth T., Zinovicv V.A.: On Z4-Linear Goethals Codes and Kloosterman Sums, 
Designs, Codes and Cryptography, vol. 17, no. 1-3, pp. 246-262, 1999. 

18. Hu H., Feng D.: On quadratic bent functions in polynomial forms, IEEE Trans. Inf. 
Theory, vol. 53, no. 7, pp. 2610-2615, 2007. 

19. Kasami T.: Weight enumerators for several classes of subcodes of the 2nd-order Reed- 
CMuller codes. Inf. Contr., vol. 18, pp. 369-394, 1971. 

20. Kim S. H., No J. S.: New families of binary sequences with low correlation, IEEE Trans. 
Inf. Theory, vol. 49, no. 11, pp. 3059-3065, 2003. 

21. Lachaud G., Wolfmann J.: The weights of the orthogonal of the extended quadratic 
binary Goppa codes, IEEE Trans. Inform. Theory, 36 (1990), pp. 686-692 

22. Maohua Le: On the Diophantine Equations dix^ + d2 = 42/", Proc. Amer. Math.Soc, 
118 (1993), 67-70. 

23. Maohua Le, Xu T.: On the Diophantine Equation Dix^ + D2 = k", Publ. Math. 
Debrecen, 47 (1995), 293-297. 

24. Leander G.: Monomial bent functions, IEEE Trans. Inf. Theory, vol. 2, no. 52, pp. 
738-743, 2006. 

25. Leander G., Kholosha A.: Bent functionswith Niho exponents, IEEE Trans. Inf. Theory, 
vol. 52, no. 12, pp. 5529-5532, 2006. 

26. Ma W., Lee M., Zhang F.: A new class of bent functions, lEICE Trans. Fund., vol. 
E88-A, no. 7, pp. 2039-2040, 2005. 

27. McFarland R. L.: A family of noncyclic difference sets, J. Combin. Theory, ser. A, no. 
15, pp. 1-10, 1973. 

28. Maisner D., Nart E.: Zeta functions of supersingular curves of genus 2. Canadian Journal 
of Mathematics 59, 372-392 (2007) 

29. Mesnagcr S.: A new class of bent boolean functions in polynomial forms, in Proc. Int. 
Workshop on Coding and Cryptography, WCC 2009, 2009, pp. 5-18. 

30. Mesnager S.: A new class of bent and hyper-bent boolean functions in polynomial forms, 
Des. Codes Cryptography, 59(l-3):265-279, 2011 

31. Mesnager S.: Bent and Hyper-Bent Functions in Polynomial Form and Their Link With 
Some Exponential Sums and Dickson Polynomials, IEEE Trans. Inf. Theory, vol. 57, no. 
9, pp. 5996-6009, 2011 

32. Mesnager S.: Hyper-bent boolean functions with multiple trace terms. In M. Anwar 
Hasan and Tor Hellcseth, editors, WAIFI, volume 6087 of Lecture Notes in Computer 
Science, pages 97-113. Springer, 2010. 

33. Mesnager S.: A new family of hypcr-bcnt Boolean functions in polynomial form. Pro- 
ceedings of Twelfth International Conference on Cryptography and Coding, Cirencester, 
United Kingdom. M. G. Parker (Ed.): IMACC 2009, LNCS 5921, pp 402-417, Springer, 
Heidelberg (2009). 

34. Mullen G. L., Lidl R., Turnwald G.: Dickson Polynomials. Reading, MA: Addison- 
Wcsley, 1993, vol. 65, Pitman Monographs in Pure and Applied Mathematics. 

35. Rothaus O. S.: On bent functions, J. Combin. Theory, ser. A, vol. 20, pp. 300-305, 1976. 

36. van der Geer G., van dcr Vlugt M.: Reed-MuUer codes and supersingular curves, I, 
Compositio Math. 84 (1992), 333-367. 

37. Yousscf A. M., Gong G.: Hyper-bent functions, in Advances in CrypologyCEurocryptOl, 
2001, LNCS, pp. 406-419. 

38. Yu N. Y., Gong G.: Construction of quadratic bent functions in polynomial forms, IEEE 
Trans. Inf. Theory, vol. 7, no. 52, pp. 3291-3299, 2006. 



